The 12 packages have been discovered in two separate scans by a security engineer who goes online by the name of Bertus, and have long been removed from PyPI before this article's publication.

Overview It's not hard to write a Python package that can be installed into an interpreter or virtual environment with pip. This video shows a simple example of how to lay out a project's source ...

Latest attack on PyPI users shows crooks are only getting better The code found in the malicious packages closely resembled legit offerings.